Apache Fesod is vulnerable to Server-Side Request Forgery through its UrlImageConverter component (CVE-2026-49328) | HOL Guard CVE